Performing a packet trace

Troubleshooting : Solutions by issue type : Connectivity issues : Performing a packet trace

When troubleshooting malformed packet or protocol errors, it helps to look inside the protocol headers of packets to determine if they are traveling along the route you expect, and with the flags and other options you expect.


	If you configure virtual servers on your FortiADC appliance, packets’ destination IP addresses will be those IP addresses, not the physical IP addresses (i.e., the IP address of port1, etc.). An ARP update is sent out when a virtual IP address is configured.

If the packet trace shows that packets are arriving at your FortiADC appliance’s interfaces but no HTTP/HTTPS packets egress, check that:

• Physical links are firmly connected, with no loose wires

• Network interfaces are brought up

• Link aggregation peers, if any, are up

• VLAN IDs, if any, match

• Virtual servers exist, and are enabled

• Matching policies exist, and are enabled

• If using HTTPS, valid server/CA certificates exist

• IP-layer and HTTP-layer routes, if necessary, match

• Servers are responsive, if server health checks are configured and enabled